Question 1

If events are not forwarded from the Forwarder to the Splunk cloud, which option is appropriate for troubleshooting?

Options :

A : Execute a ping from the Forwarder and check that the splunk cloud URL can be reached.

B : Check the Fowarder output.log to ensure that forwarding is being carried out properly.

C : Run the oneshot command and check if the event is reachable.

D : Check the _audit index and see if there are any events where the Forwarder is host.

Answer: C

Question 2

What are the two options for Dynamic Data Storage in Splunk Cloud that allow you to move expired data from indexes to another storage location?

Options :

A : Splunk Archive and Splunk Backup

B : Splunk Archive and Self Storage

C : Self Storage and Splunk Restore

D : Splunk Backup and Self Storage

Answer: B

Question 3

Which of the following are valid settings for file and directory monitor inputs?

Options :

A :

B :

C :

D :

Answer: B

Question 4

Which option can be used to specify the host value of the data when creating a file or directory monitor input?

Options :

A : Select Host

B : Define Host

C : Choose Host

D : Set Host

Answer: D

Question 5

The following sample log event shows evidence of credit card numbers being present in the transactions. loc file.

Which of these SEDCM3 settings will mask this and other suspected credit card numbers with an Y character for each character being masked? The indexed event should be formatted as follows:

Options :

A :

B :

C :

D :

Answer: A